@open-mercato/core 0.10.1-develop.7836.1.0ef0f453c6 → 0.10.1-develop.7847.1.7d83dc5794

package/dist/modules/staff/backend/staff/time-tracking/projects/[id]/edit/page.js

@@ -15,6 +15,8 @@ import { useT } from "@open-mercato/shared/lib/i18n/context";
 import { useOrganizationScopeVersion } from "@open-mercato/shared/lib/frontend/useOrganizationScope";
 import { DEFAULT_BUDGET_WARN_AT_PERCENT } from "../../../../../../lib/time-tracking-ui/ProjectFormSections.js";
 import { NoProjectAccess } from "../../../../../../lib/time-tracking-ui/NoProjectAccess.js";
+import { useProjectAccessScope } from "../../../../../../lib/time-tracking-ui/projectAccessScope.js";
+import { readResolvedProjectAccessScope } from "../../../../../../lib/time-tracking-ui/projectAccessScopeHeaders.js";
 import {
   buildProjectPayload,
   createProjectFormFields,
@@ -25,8 +27,9 @@ import {
 const LIST_HREF = "/backend/staff/time-tracking/projects";
 const NO_PROJECT_ACCESS_REASON = "no_project_access";
 class ProjectAccessDeniedError extends Error {
-  constructor() {
+  constructor(resolvedScope) {
     super("[internal] no project access");
+    this.resolvedScope = resolvedScope;
     this.name = "ProjectAccessDeniedError";
   }
 }
@@ -86,27 +89,30 @@ function TimeTrackingProjectEditPage({ params }) {
   const t = useT();
   const router = useRouter();
   const scopeVersion = useOrganizationScopeVersion();
+  const { scopeKey: projectAccessScopeKey, resolvedScope, resolveScope } = useProjectAccessScope(projectId);
   const [initialValues, setInitialValues] = React.useState(null);
   const [loading, setLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
   const [isNotFound, setIsNotFound] = React.useState(false);
-  const [accessDenied, setAccessDenied] = React.useState(false);
+  const [accessDeniedScopeKey, setAccessDeniedScopeKey] = React.useState(null);
+  const [loadedScopeKey, setLoadedScopeKey] = React.useState(null);
+  const accessDenied = accessDeniedScopeKey === projectAccessScopeKey;
   const fetchProject = React.useCallback(async () => {
     const call = await apiCall(
       `/api/staff/timesheets/time-projects?ids=${projectId}&pageSize=1`
     );
     if (call.status === 404 && call.result?.reason === NO_PROJECT_ACCESS_REASON) {
-      throw new ProjectAccessDeniedError();
+      throw new ProjectAccessDeniedError(readResolvedProjectAccessScope(call.response));
     }
     if (!call.ok) {
       throw new Error(t("staff.timesheets.projects.errors.load", "Failed to load project."));
     }
     const record = Array.isArray(call.result?.items) ? call.result.items[0] : null;
-    return record ?? null;
+    return { record: record ?? null, scope: readResolvedProjectAccessScope(call.response) };
   }, [projectId, t]);
   const handleCurrencyChanged = React.useCallback(() => {
     if (!projectId) return;
-    void fetchProject().then((record) => {
+    void fetchProject().then(({ record }) => {
       if (record) setInitialValues(toValues(record));
     }).catch(() => {
     });
@@ -122,20 +128,22 @@ function TimeTrackingProjectEditPage({ params }) {
     if (!projectId) return;
     let cancelled = false;
     const replaced = lastLoadRef.current;
-    lastLoadRef.current = { projectId, scopeVersion };
-    const keepScreen = replaced !== null && replaced.projectId === projectId && replaced.scopeVersion === 0;
+    lastLoadRef.current = { projectId, scopeVersion, scopeKey: projectAccessScopeKey };
+    const keepScreen = replaced !== null && replaced.projectId === projectId && replaced.scopeVersion === 0 && replaced.scopeKey === projectAccessScopeKey;
     async function load() {
       if (!keepScreen) setLoading(true);
       const settle = (outcome) => {
         if (cancelled) return;
-        setAccessDenied(outcome.accessDenied === true);
+        setAccessDeniedScopeKey(outcome.accessDenied === true ? projectAccessScopeKey : null);
         setIsNotFound(outcome.isNotFound === true);
         setError(outcome.error ?? null);
         if (outcome.values) setInitialValues(outcome.values);
+        setLoadedScopeKey(projectAccessScopeKey);
         setLoading(false);
       };
       try {
-        const record = await fetchProject();
+        const { record, scope } = await fetchProject();
+        if (!cancelled) resolveScope(scope);
         if (!record) {
           settle({ isNotFound: true });
           return;
@@ -143,6 +151,7 @@ function TimeTrackingProjectEditPage({ params }) {
         settle({ values: toValues(record) });
       } catch (err) {
         if (err instanceof ProjectAccessDeniedError) {
+          if (!cancelled) resolveScope(err.resolvedScope);
           settle({ accessDenied: true });
           return;
         }
@@ -155,12 +164,12 @@ function TimeTrackingProjectEditPage({ params }) {
     return () => {
       cancelled = true;
     };
-  }, [projectId, fetchProject, scopeVersion, t]);
-  if (loading) {
+  }, [projectId, fetchProject, scopeVersion, t, projectAccessScopeKey, resolveScope]);
+  if (!accessDenied && (loading || loadedScopeKey !== projectAccessScopeKey)) {
     return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(LoadingMessage, { label: t("staff.timesheets.projects.loading", "Loading project...") }) }) });
   }
   if (accessDenied) {
-    return /* @__PURE__ */ jsx(NoProjectAccess, { timeProjectId: projectId });
+    return /* @__PURE__ */ jsx(NoProjectAccess, { timeProjectId: projectId, resolvedScope });
   }
   if (isNotFound) {
     return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(

package/dist/modules/staff/backend/staff/time-tracking/projects/[id]/edit/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../../src/modules/staff/backend/staff/time-tracking/projects/%5Bid%5D/edit/page.tsx"],
-  "sourcesContent": ["\"use client\"\n\nimport { extensionPoints } from '@open-mercato/core/modules/staff/extension-points'\nimport * as React from 'react'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { E } from '#generated/entities.ids.generated'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { LoadingMessage, ErrorMessage, RecordNotFoundState } from '@open-mercato/ui/backend/detail'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { DEFAULT_BUDGET_WARN_AT_PERCENT, type ProjectBudgetKind } from '../../../../../../lib/time-tracking-ui/ProjectFormSections'\nimport { NoProjectAccess } from '../../../../../../lib/time-tracking-ui/NoProjectAccess'\nimport {\n  buildProjectPayload,\n  createProjectFormFields,\n  createProjectFormGroups,\n  createProjectFormSchema,\n  pickCustomFieldValues,\n  type ProjectFormValues,\n} from '../../projectFormConfig'\n\nconst LIST_HREF = '/backend/staff/time-tracking/projects'\n\n/**\n * Mirrors `NO_PROJECT_ACCESS_REASON` from\n * `api/timesheets/time-projects/route.ts`. The route module is server-only, so\n * the literal is restated here rather than imported into the client bundle;\n * `__tests__/no-project-access-contract.test.ts` pins the two together.\n */\nconst NO_PROJECT_ACCESS_REASON = 'no_project_access'\n\n/** Thrown by the loader so the caller can branch on the guard state. */\nclass ProjectAccessDeniedError extends Error {\n  constructor() {\n    super('[internal] no project access')\n    this.name = 'ProjectAccessDeniedError'\n  }\n}\n\ntype ProjectRecord = Record<string, unknown>\n\nfunction readString(record: ProjectRecord, ...keys: string[]): string | null {\n  for (const key of keys) {\n    const value = record[key]\n    if (typeof value === 'string' && value.length > 0) return value\n    if (typeof value === 'number') return String(value)\n  }\n  return null\n}\n\nfunction readSnapshot(record: ProjectRecord): Record<string, unknown> | null {\n  const raw = record.customerSnapshot ?? record.customer_snapshot\n  if (raw && typeof raw === 'object' && !Array.isArray(raw)) return raw as Record<string, unknown>\n  return null\n}\n\nfunction toValues(record: ProjectRecord): ProjectFormValues {\n  const snapshot = readSnapshot(record)\n  const budgetKindRaw = readString(record, 'budgetKind', 'budget_kind') ?? 'none'\n  const budgetKind: ProjectBudgetKind =\n    budgetKindRaw === 'hours' || budgetKindRaw === 'amount' ? budgetKindRaw : 'none'\n  const entryCount = typeof record.entryCount === 'number' ? record.entryCount : 0\n\n  return {\n    id: String(record.id ?? ''),\n    updatedAt: readString(record, 'updatedAt', 'updated_at'),\n    name: String(record.name ?? ''),\n    code: String(record.code ?? ''),\n    // D-10: an existing project keeps the code it was saved with \u2014 the name no\n    // longer drives it.\n    codeManual: true,\n    customerId: readString(record, 'customerId', 'customer_id'),\n    customerName: typeof snapshot?.name === 'string' ? snapshot.name : null,\n    customerKind: typeof snapshot?.kind === 'string' ? snapshot.kind : null,\n    customerTaxId: typeof snapshot?.taxId === 'string' ? snapshot.taxId : null,\n    description: readString(record, 'description'),\n    hourlyRate: readString(record, 'hourlyRate', 'hourly_rate'),\n    currencyCode: readString(record, 'currencyCode', 'currency_code'),\n    currencyLocked: record.currencyLocked === true,\n    entryCount,\n    billableByDefault: (record.billableByDefault ?? record.billable_by_default) !== false,\n    budgetEnabled: budgetKind !== 'none',\n    budgetKind: budgetKind === 'none' ? 'hours' : budgetKind,\n    budgetValue: readString(record, 'budgetValue', 'budget_value'),\n    budgetWarnAtPercent:\n      readString(record, 'budgetWarnAtPercent', 'budget_warn_at_percent') ?? String(DEFAULT_BUDGET_WARN_AT_PERCENT),\n    defaultAssigneeStaffMemberId: readString(record, 'defaultAssigneeStaffMemberId', 'default_assignee_staff_member_id') ?? null,\n    projectType: readString(record, 'projectType', 'project_type'),\n    color: readString(record, 'color'),\n    startDate: readString(record, 'startDate', 'start_date'),\n    costCenter: readString(record, 'costCenter', 'cost_center'),\n    status: readString(record, 'status') ?? 'active',\n    // `decorateCustomFields` on the list route returns the saved values as\n    // `cf_<key>`, which is exactly what `CrudForm` looks an initial value up by.\n    ...pickCustomFieldValues(record as Record<string, unknown>),\n  }\n}\n\nexport default function TimeTrackingProjectEditPage({ params }: { params?: { id?: string } }) {\n  const projectId = params?.id\n  const t = useT()\n  const router = useRouter()\n  const scopeVersion = useOrganizationScopeVersion()\n\n  const [initialValues, setInitialValues] = React.useState<ProjectFormValues | null>(null)\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [isNotFound, setIsNotFound] = React.useState(false)\n  const [accessDenied, setAccessDenied] = React.useState(false)\n\n  const fetchProject = React.useCallback(async (): Promise<ProjectRecord | null> => {\n    const call = await apiCall<{ items?: ProjectRecord[]; reason?: unknown }>(\n      `/api/staff/timesheets/time-projects?ids=${projectId}&pageSize=1`,\n    )\n    if (call.status === 404 && call.result?.reason === NO_PROJECT_ACCESS_REASON) {\n      throw new ProjectAccessDeniedError()\n    }\n    if (!call.ok) {\n      throw new Error(t('staff.timesheets.projects.errors.load', 'Failed to load project.'))\n    }\n    const record = Array.isArray(call.result?.items) ? call.result.items[0] : null\n    return record ?? null\n  }, [projectId, t])\n\n  /**\n   * D-3: the change-currency action writes to the project directly, so it bumped\n   * both the currency and `updated_at`. Reload the record \u2014 the form derives its\n   * optimistic-lock version from `initialValues.updatedAt`, and a stale one would\n   * fail the next save with a conflict this same user had just caused. `CrudForm`\n   * merges refreshed initial values without discarding fields being edited.\n   */\n  const handleCurrencyChanged = React.useCallback(() => {\n    if (!projectId) return\n    void fetchProject()\n      .then((record) => { if (record) setInitialValues(toValues(record)) })\n      .catch(() => {\n        // Best effort: the optimistic-lock conflict bar remains the backstop.\n      })\n  }, [fetchProject, projectId])\n\n  const formSchema = React.useMemo(() => createProjectFormSchema(), [])\n  const fields = React.useMemo(\n    () => createProjectFormFields(t, { onCurrencyChanged: handleCurrencyChanged }),\n    [t, handleCurrencyChanged],\n  )\n  const groups = React.useMemo(() => createProjectFormGroups(t), [t])\n\n  // The organization switcher settles the scope just after mount, bumping the\n  // scope version from 0 and reloading the project. A screen resolved before\n  // that stays up until the answer arrives: falling back to the full-page\n  // loader would unmount it and drop its local state \u2014 the form's unsaved\n  // edits, or an access request the user has just sent. A switch between two\n  // known scopes still goes through the loader, so no form outlives the scope\n  // it was loaded for. The decision looks at the load this one replaces,\n  // settled or not: a version-0 load cancelled by a quick second switch must\n  // not let that switch through.\n  const lastLoadRef = React.useRef<{ projectId: string; scopeVersion: number } | null>(null)\n  React.useEffect(() => {\n    if (!projectId) return\n    let cancelled = false\n    const replaced = lastLoadRef.current\n    lastLoadRef.current = { projectId, scopeVersion }\n    const keepScreen = replaced !== null && replaced.projectId === projectId && replaced.scopeVersion === 0\n    async function load() {\n      if (!keepScreen) setLoading(true)\n      const settle = (outcome: { values?: ProjectFormValues; accessDenied?: boolean; isNotFound?: boolean; error?: string }) => {\n        if (cancelled) return\n        setAccessDenied(outcome.accessDenied === true)\n        setIsNotFound(outcome.isNotFound === true)\n        setError(outcome.error ?? null)\n        if (outcome.values) setInitialValues(outcome.values)\n        setLoading(false)\n      }\n      try {\n        const record = await fetchProject()\n        if (!record) {\n          settle({ isNotFound: true })\n          return\n        }\n        settle({ values: toValues(record) })\n      } catch (err) {\n        if (err instanceof ProjectAccessDeniedError) {\n          settle({ accessDenied: true })\n          return\n        }\n        settle({\n          error: err instanceof Error\n            ? err.message\n            : t('staff.timesheets.projects.errors.load', 'Failed to load project.'),\n        })\n      }\n    }\n    load()\n    return () => { cancelled = true }\n  }, [projectId, fetchProject, scopeVersion, t])\n\n  if (loading) {\n    return <Page><PageBody><LoadingMessage label={t('staff.timesheets.projects.loading', 'Loading project...')} /></PageBody></Page>\n  }\n\n  // Screen 17 \u2014 the caller may not open this project. Same guard state the\n  // detail page renders; it names neither the customer nor the project.\n  if (accessDenied) {\n    return <NoProjectAccess timeProjectId={projectId} />\n  }\n\n  if (isNotFound) {\n    return (\n      <Page>\n        <PageBody>\n          <RecordNotFoundState\n            label={t('staff.timesheets.projects.errors.notFound', 'Project not found.')}\n            backHref={LIST_HREF}\n            backLabel={t('staff.timesheets.projects.actions.backToList', 'Back to projects')}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !initialValues) {\n    return <Page><PageBody><ErrorMessage label={error ?? t('staff.timesheets.projects.errors.load', 'Failed to load project.')} /></PageBody></Page>\n  }\n\n  const detailHref = `/backend/staff/time-tracking/projects/${projectId}`\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm<ProjectFormValues>\n          title={t('staff.time_tracking.projects.form.editTitle', 'Edit project')}\n          titleHeadingLevel={1}\n          backHref={detailHref}\n          cancelHref={detailHref}\n          fields={fields}\n          groups={groups}\n          schema={formSchema}\n          initialValues={initialValues}\n          entityIds={[E.staff.staff_time_project]}\n          injectionSpotId={extensionPoints.hosts.projectForm.spotId}\n          submitLabel={t('staff.timesheets.projects.form.actions.save', 'Save')}\n          onDelete={async () => {\n            await deleteCrud('staff/timesheets/time-projects', projectId!, {\n              errorMessage: t('staff.timesheets.projects.errors.delete', 'Failed to delete project.'),\n            })\n            flash(t('staff.timesheets.projects.messages.deleted', 'Project deleted.'), 'success')\n            router.push(LIST_HREF)\n          }}\n          onSubmit={async (values) => {\n            if (!values.name?.trim() || !values.code?.trim() || !values.customerId) {\n              const fieldErrors: Record<string, string> = {}\n              if (!values.name?.trim()) {\n                fieldErrors.name = t('staff.time_tracking.projects.validation.nameRequired', 'A project name is required.')\n              }\n              if (!values.code?.trim()) {\n                fieldErrors.code = t('staff.time_tracking.projects.validation.codeRequired', 'A project code is required.')\n              }\n              if (!values.customerId) {\n                fieldErrors.customerId = t('staff.time_tracking.projects.validation.customerRequired', 'A customer is required.')\n              }\n              throw createCrudFormError(\n                t('staff.time_tracking.projects.errors.required', 'Fill in the required fields.'),\n                fieldErrors,\n              )\n            }\n\n            const payload = buildProjectPayload({ ...values, id: projectId })\n\n            await updateCrud('staff/timesheets/time-projects', payload, {\n              errorMessage: t('staff.timesheets.projects.errors.save', 'Failed to save project.'),\n            })\n\n            flash(t('staff.timesheets.projects.messages.saved', 'Project saved.'), 'success')\n            router.push(detailHref)\n          }}\n          versionHistory={{\n            resourceKind: 'staff.timesheets.time_project',\n            resourceId: projectId!,\n            canUndoRedo: true,\n            autoCheckAcl: true,\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA0M2B;AAxM3B,SAAS,uBAAuB;AAChC,YAAY,WAAW;AACvB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,YAAY,kBAAkB;AACvC,SAAS,eAAe;AACxB,SAAS,2BAA2B;AACpC,SAAS,SAAS;AAClB,SAAS,aAAa;AACtB,SAAS,gBAAgB,cAAc,2BAA2B;AAClE,SAAS,YAAY;AACrB,SAAS,mCAAmC;AAC5C,SAAS,sCAA8D;AACvE,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP,MAAM,YAAY;AAQlB,MAAM,2BAA2B;AAGjC,MAAM,iCAAiC,MAAM;AAAA,EAC3C,cAAc;AACZ,UAAM,8BAA8B;AACpC,SAAK,OAAO;AAAA,EACd;AACF;AAIA,SAAS,WAAW,WAA0B,MAA+B;AAC3E,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,QAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAAuD;AAC3E,QAAM,MAAM,OAAO,oBAAoB,OAAO;AAC9C,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,SAAS,QAA0C;AAC1D,QAAM,WAAW,aAAa,MAAM;AACpC,QAAM,gBAAgB,WAAW,QAAQ,cAAc,aAAa,KAAK;AACzE,QAAM,aACJ,kBAAkB,WAAW,kBAAkB,WAAW,gBAAgB;AAC5E,QAAM,aAAa,OAAO,OAAO,eAAe,WAAW,OAAO,aAAa;AAE/E,SAAO;AAAA,IACL,IAAI,OAAO,OAAO,MAAM,EAAE;AAAA,IAC1B,WAAW,WAAW,QAAQ,aAAa,YAAY;AAAA,IACvD,MAAM,OAAO,OAAO,QAAQ,EAAE;AAAA,IAC9B,MAAM,OAAO,OAAO,QAAQ,EAAE;AAAA;AAAA;AAAA,IAG9B,YAAY;AAAA,IACZ,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,cAAc,OAAO,UAAU,SAAS,WAAW,SAAS,OAAO;AAAA,IACnE,cAAc,OAAO,UAAU,SAAS,WAAW,SAAS,OAAO;AAAA,IACnE,eAAe,OAAO,UAAU,UAAU,WAAW,SAAS,QAAQ;AAAA,IACtE,aAAa,WAAW,QAAQ,aAAa;AAAA,IAC7C,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,cAAc,WAAW,QAAQ,gBAAgB,eAAe;AAAA,IAChE,gBAAgB,OAAO,mBAAmB;AAAA,IAC1C;AAAA,IACA,oBAAoB,OAAO,qBAAqB,OAAO,yBAAyB;AAAA,IAChF,eAAe,eAAe;AAAA,IAC9B,YAAY,eAAe,SAAS,UAAU;AAAA,IAC9C,aAAa,WAAW,QAAQ,eAAe,cAAc;AAAA,IAC7D,qBACE,WAAW,QAAQ,uBAAuB,wBAAwB,KAAK,OAAO,8BAA8B;AAAA,IAC9G,8BAA8B,WAAW,QAAQ,gCAAgC,kCAAkC,KAAK;AAAA,IACxH,aAAa,WAAW,QAAQ,eAAe,cAAc;AAAA,IAC7D,OAAO,WAAW,QAAQ,OAAO;AAAA,IACjC,WAAW,WAAW,QAAQ,aAAa,YAAY;AAAA,IACvD,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,QAAQ,WAAW,QAAQ,QAAQ,KAAK;AAAA;AAAA;AAAA,IAGxC,GAAG,sBAAsB,MAAiC;AAAA,EAC5D;AACF;AAEe,SAAR,4BAA6C,EAAE,OAAO,GAAiC;AAC5F,QAAM,YAAY,QAAQ;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,4BAA4B;AAEjD,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAmC,IAAI;AACvF,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,KAAK;AACxD,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,KAAK;AAE5D,QAAM,eAAe,MAAM,YAAY,YAA2C;AAChF,UAAM,OAAO,MAAM;AAAA,MACjB,2CAA2C,SAAS;AAAA,IACtD;AACA,QAAI,KAAK,WAAW,OAAO,KAAK,QAAQ,WAAW,0BAA0B;AAC3E,YAAM,IAAI,yBAAyB;AAAA,IACrC;AACA,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI,MAAM,EAAE,yCAAyC,yBAAyB,CAAC;AAAA,IACvF;AACA,UAAM,SAAS,MAAM,QAAQ,KAAK,QAAQ,KAAK,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;AAC1E,WAAO,UAAU;AAAA,EACnB,GAAG,CAAC,WAAW,CAAC,CAAC;AASjB,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,QAAI,CAAC,UAAW;AAChB,SAAK,aAAa,EACf,KAAK,CAAC,WAAW;AAAE,UAAI,OAAQ,kBAAiB,SAAS,MAAM,CAAC;AAAA,IAAE,CAAC,EACnE,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL,GAAG,CAAC,cAAc,SAAS,CAAC;AAE5B,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACpE,QAAM,SAAS,MAAM;AAAA,IACnB,MAAM,wBAAwB,GAAG,EAAE,mBAAmB,sBAAsB,CAAC;AAAA,IAC7E,CAAC,GAAG,qBAAqB;AAAA,EAC3B;AACA,QAAM,SAAS,MAAM,QAAQ,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;AAWlE,QAAM,cAAc,MAAM,OAA2D,IAAI;AACzF,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,UAAM,WAAW,YAAY;AAC7B,gBAAY,UAAU,EAAE,WAAW,aAAa;AAChD,UAAM,aAAa,aAAa,QAAQ,SAAS,cAAc,aAAa,SAAS,iBAAiB;AACtG,mBAAe,OAAO;AACpB,UAAI,CAAC,WAAY,YAAW,IAAI;AAChC,YAAM,SAAS,CAAC,YAA0G;AACxH,YAAI,UAAW;AACf,wBAAgB,QAAQ,iBAAiB,IAAI;AAC7C,sBAAc,QAAQ,eAAe,IAAI;AACzC,iBAAS,QAAQ,SAAS,IAAI;AAC9B,YAAI,QAAQ,OAAQ,kBAAiB,QAAQ,MAAM;AACnD,mBAAW,KAAK;AAAA,MAClB;AACA,UAAI;AACF,cAAM,SAAS,MAAM,aAAa;AAClC,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,YAAY,KAAK,CAAC;AAC3B;AAAA,QACF;AACA,eAAO,EAAE,QAAQ,SAAS,MAAM,EAAE,CAAC;AAAA,MACrC,SAAS,KAAK;AACZ,YAAI,eAAe,0BAA0B;AAC3C,iBAAO,EAAE,cAAc,KAAK,CAAC;AAC7B;AAAA,QACF;AACA,eAAO;AAAA,UACL,OAAO,eAAe,QAClB,IAAI,UACJ,EAAE,yCAAyC,yBAAyB;AAAA,QAC1E,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK;AACL,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,WAAW,cAAc,cAAc,CAAC,CAAC;AAE7C,MAAI,SAAS;AACX,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,kBAAe,OAAO,EAAE,qCAAqC,oBAAoB,GAAG,GAAE,GAAW;AAAA,EAC3H;AAIA,MAAI,cAAc;AAChB,WAAO,oBAAC,mBAAgB,eAAe,WAAW;AAAA,EACpD;AAEA,MAAI,YAAY;AACd,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,6CAA6C,oBAAoB;AAAA,QAC1E,UAAU;AAAA,QACV,WAAW,EAAE,gDAAgD,kBAAkB;AAAA;AAAA,IACjF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,eAAe;AAC3B,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,gBAAa,OAAO,SAAS,EAAE,yCAAyC,yBAAyB,GAAG,GAAE,GAAW;AAAA,EAC3I;AAEA,QAAM,aAAa,yCAAyC,SAAS;AAErE,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,+CAA+C,cAAc;AAAA,MACtE,mBAAmB;AAAA,MACnB,UAAU;AAAA,MACV,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,CAAC,EAAE,MAAM,kBAAkB;AAAA,MACtC,iBAAiB,gBAAgB,MAAM,YAAY;AAAA,MACnD,aAAa,EAAE,+CAA+C,MAAM;AAAA,MACpE,UAAU,YAAY;AACpB,cAAM,WAAW,kCAAkC,WAAY;AAAA,UAC7D,cAAc,EAAE,2CAA2C,2BAA2B;AAAA,QACxF,CAAC;AACD,cAAM,EAAE,8CAA8C,kBAAkB,GAAG,SAAS;AACpF,eAAO,KAAK,SAAS;AAAA,MACvB;AAAA,MACA,UAAU,OAAO,WAAW;AAC1B,YAAI,CAAC,OAAO,MAAM,KAAK,KAAK,CAAC,OAAO,MAAM,KAAK,KAAK,CAAC,OAAO,YAAY;AACtE,gBAAM,cAAsC,CAAC;AAC7C,cAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,wBAAY,OAAO,EAAE,wDAAwD,6BAA6B;AAAA,UAC5G;AACA,cAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,wBAAY,OAAO,EAAE,wDAAwD,6BAA6B;AAAA,UAC5G;AACA,cAAI,CAAC,OAAO,YAAY;AACtB,wBAAY,aAAa,EAAE,4DAA4D,yBAAyB;AAAA,UAClH;AACA,gBAAM;AAAA,YACJ,EAAE,gDAAgD,8BAA8B;AAAA,YAChF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,UAAU,oBAAoB,EAAE,GAAG,QAAQ,IAAI,UAAU,CAAC;AAEhE,cAAM,WAAW,kCAAkC,SAAS;AAAA,UAC1D,cAAc,EAAE,yCAAyC,yBAAyB;AAAA,QACpF,CAAC;AAED,cAAM,EAAE,4CAA4C,gBAAgB,GAAG,SAAS;AAChF,eAAO,KAAK,UAAU;AAAA,MACxB;AAAA,MACA,gBAAgB;AAAA,QACd,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,cAAc;AAAA,MAChB;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\n\nimport { extensionPoints } from '@open-mercato/core/modules/staff/extension-points'\nimport * as React from 'react'\nimport { useRouter } from 'next/navigation'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { CrudForm } from '@open-mercato/ui/backend/CrudForm'\nimport { updateCrud, deleteCrud } from '@open-mercato/ui/backend/utils/crud'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport { createCrudFormError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { E } from '#generated/entities.ids.generated'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { LoadingMessage, ErrorMessage, RecordNotFoundState } from '@open-mercato/ui/backend/detail'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { useOrganizationScopeVersion } from '@open-mercato/shared/lib/frontend/useOrganizationScope'\nimport { DEFAULT_BUDGET_WARN_AT_PERCENT, type ProjectBudgetKind } from '../../../../../../lib/time-tracking-ui/ProjectFormSections'\nimport { NoProjectAccess } from '../../../../../../lib/time-tracking-ui/NoProjectAccess'\nimport { useProjectAccessScope } from '../../../../../../lib/time-tracking-ui/projectAccessScope'\nimport { readResolvedProjectAccessScope, type ResolvedProjectAccessScope } from '../../../../../../lib/time-tracking-ui/projectAccessScopeHeaders'\nimport {\n  buildProjectPayload,\n  createProjectFormFields,\n  createProjectFormGroups,\n  createProjectFormSchema,\n  pickCustomFieldValues,\n  type ProjectFormValues,\n} from '../../projectFormConfig'\n\nconst LIST_HREF = '/backend/staff/time-tracking/projects'\n\n/**\n * Mirrors `NO_PROJECT_ACCESS_REASON` from\n * `api/timesheets/time-projects/route.ts`. The route module is server-only, so\n * the literal is restated here rather than imported into the client bundle;\n * `__tests__/no-project-access-contract.test.ts` pins the two together.\n */\nconst NO_PROJECT_ACCESS_REASON = 'no_project_access'\n\n/** Thrown by the loader so the caller can branch on the guard state. */\nclass ProjectAccessDeniedError extends Error {\n  constructor(readonly resolvedScope: ResolvedProjectAccessScope | null) {\n    super('[internal] no project access')\n    this.name = 'ProjectAccessDeniedError'\n  }\n}\n\ntype ProjectRecord = Record<string, unknown>\n\nfunction readString(record: ProjectRecord, ...keys: string[]): string | null {\n  for (const key of keys) {\n    const value = record[key]\n    if (typeof value === 'string' && value.length > 0) return value\n    if (typeof value === 'number') return String(value)\n  }\n  return null\n}\n\nfunction readSnapshot(record: ProjectRecord): Record<string, unknown> | null {\n  const raw = record.customerSnapshot ?? record.customer_snapshot\n  if (raw && typeof raw === 'object' && !Array.isArray(raw)) return raw as Record<string, unknown>\n  return null\n}\n\nfunction toValues(record: ProjectRecord): ProjectFormValues {\n  const snapshot = readSnapshot(record)\n  const budgetKindRaw = readString(record, 'budgetKind', 'budget_kind') ?? 'none'\n  const budgetKind: ProjectBudgetKind =\n    budgetKindRaw === 'hours' || budgetKindRaw === 'amount' ? budgetKindRaw : 'none'\n  const entryCount = typeof record.entryCount === 'number' ? record.entryCount : 0\n\n  return {\n    id: String(record.id ?? ''),\n    updatedAt: readString(record, 'updatedAt', 'updated_at'),\n    name: String(record.name ?? ''),\n    code: String(record.code ?? ''),\n    // D-10: an existing project keeps the code it was saved with \u2014 the name no\n    // longer drives it.\n    codeManual: true,\n    customerId: readString(record, 'customerId', 'customer_id'),\n    customerName: typeof snapshot?.name === 'string' ? snapshot.name : null,\n    customerKind: typeof snapshot?.kind === 'string' ? snapshot.kind : null,\n    customerTaxId: typeof snapshot?.taxId === 'string' ? snapshot.taxId : null,\n    description: readString(record, 'description'),\n    hourlyRate: readString(record, 'hourlyRate', 'hourly_rate'),\n    currencyCode: readString(record, 'currencyCode', 'currency_code'),\n    currencyLocked: record.currencyLocked === true,\n    entryCount,\n    billableByDefault: (record.billableByDefault ?? record.billable_by_default) !== false,\n    budgetEnabled: budgetKind !== 'none',\n    budgetKind: budgetKind === 'none' ? 'hours' : budgetKind,\n    budgetValue: readString(record, 'budgetValue', 'budget_value'),\n    budgetWarnAtPercent:\n      readString(record, 'budgetWarnAtPercent', 'budget_warn_at_percent') ?? String(DEFAULT_BUDGET_WARN_AT_PERCENT),\n    defaultAssigneeStaffMemberId: readString(record, 'defaultAssigneeStaffMemberId', 'default_assignee_staff_member_id') ?? null,\n    projectType: readString(record, 'projectType', 'project_type'),\n    color: readString(record, 'color'),\n    startDate: readString(record, 'startDate', 'start_date'),\n    costCenter: readString(record, 'costCenter', 'cost_center'),\n    status: readString(record, 'status') ?? 'active',\n    // `decorateCustomFields` on the list route returns the saved values as\n    // `cf_<key>`, which is exactly what `CrudForm` looks an initial value up by.\n    ...pickCustomFieldValues(record as Record<string, unknown>),\n  }\n}\n\nexport default function TimeTrackingProjectEditPage({ params }: { params?: { id?: string } }) {\n  const projectId = params?.id\n  const t = useT()\n  const router = useRouter()\n  const scopeVersion = useOrganizationScopeVersion()\n  const { scopeKey: projectAccessScopeKey, resolvedScope, resolveScope } = useProjectAccessScope(projectId)\n\n  const [initialValues, setInitialValues] = React.useState<ProjectFormValues | null>(null)\n  const [loading, setLoading] = React.useState(true)\n  const [error, setError] = React.useState<string | null>(null)\n  const [isNotFound, setIsNotFound] = React.useState(false)\n  const [accessDeniedScopeKey, setAccessDeniedScopeKey] = React.useState<string | null>(null)\n  const [loadedScopeKey, setLoadedScopeKey] = React.useState<string | null>(null)\n  const accessDenied = accessDeniedScopeKey === projectAccessScopeKey\n\n  const fetchProject = React.useCallback(async (): Promise<{ record: ProjectRecord | null; scope: ResolvedProjectAccessScope | null }> => {\n    const call = await apiCall<{ items?: ProjectRecord[]; reason?: unknown }>(\n      `/api/staff/timesheets/time-projects?ids=${projectId}&pageSize=1`,\n    )\n    if (call.status === 404 && call.result?.reason === NO_PROJECT_ACCESS_REASON) {\n      throw new ProjectAccessDeniedError(readResolvedProjectAccessScope(call.response))\n    }\n    if (!call.ok) {\n      throw new Error(t('staff.timesheets.projects.errors.load', 'Failed to load project.'))\n    }\n    const record = Array.isArray(call.result?.items) ? call.result.items[0] : null\n    return { record: record ?? null, scope: readResolvedProjectAccessScope(call.response) }\n  }, [projectId, t])\n\n  /**\n   * D-3: the change-currency action writes to the project directly, so it bumped\n   * both the currency and `updated_at`. Reload the record \u2014 the form derives its\n   * optimistic-lock version from `initialValues.updatedAt`, and a stale one would\n   * fail the next save with a conflict this same user had just caused. `CrudForm`\n   * merges refreshed initial values without discarding fields being edited.\n   */\n  const handleCurrencyChanged = React.useCallback(() => {\n    if (!projectId) return\n    void fetchProject()\n      .then(({ record }) => { if (record) setInitialValues(toValues(record)) })\n      .catch(() => {\n        // Best effort: the optimistic-lock conflict bar remains the backstop.\n      })\n  }, [fetchProject, projectId])\n\n  const formSchema = React.useMemo(() => createProjectFormSchema(), [])\n  const fields = React.useMemo(\n    () => createProjectFormFields(t, { onCurrencyChanged: handleCurrencyChanged }),\n    [t, handleCurrencyChanged],\n  )\n  const groups = React.useMemo(() => createProjectFormGroups(t), [t])\n\n  // The organization switcher settles the scope just after mount, bumping the\n  // scope version from 0 and reloading the project. A screen resolved before\n  // that stays up until the answer arrives: falling back to the full-page\n  // loader would unmount it and drop its local state \u2014 the form's unsaved\n  // edits, or an access request the user has just sent. A switch between two\n  // known scopes still goes through the loader, so no form outlives the scope\n  // it was loaded for. The decision looks at the load this one replaces,\n  // settled or not: a version-0 load cancelled by a quick second switch must\n  // not let that switch through.\n  const lastLoadRef = React.useRef<{ projectId: string; scopeVersion: number; scopeKey: string } | null>(null)\n  React.useEffect(() => {\n    if (!projectId) return\n    let cancelled = false\n    const replaced = lastLoadRef.current\n    lastLoadRef.current = { projectId, scopeVersion, scopeKey: projectAccessScopeKey }\n    const keepScreen = replaced !== null\n      && replaced.projectId === projectId\n      && replaced.scopeVersion === 0\n      && replaced.scopeKey === projectAccessScopeKey\n    async function load() {\n      if (!keepScreen) setLoading(true)\n      const settle = (outcome: { values?: ProjectFormValues; accessDenied?: boolean; isNotFound?: boolean; error?: string }) => {\n        if (cancelled) return\n        setAccessDeniedScopeKey(outcome.accessDenied === true ? projectAccessScopeKey : null)\n        setIsNotFound(outcome.isNotFound === true)\n        setError(outcome.error ?? null)\n        if (outcome.values) setInitialValues(outcome.values)\n        setLoadedScopeKey(projectAccessScopeKey)\n        setLoading(false)\n      }\n      try {\n        const { record, scope } = await fetchProject()\n        if (!cancelled) resolveScope(scope)\n        if (!record) {\n          settle({ isNotFound: true })\n          return\n        }\n        settle({ values: toValues(record) })\n      } catch (err) {\n        if (err instanceof ProjectAccessDeniedError) {\n          if (!cancelled) resolveScope(err.resolvedScope)\n          settle({ accessDenied: true })\n          return\n        }\n        settle({\n          error: err instanceof Error\n            ? err.message\n            : t('staff.timesheets.projects.errors.load', 'Failed to load project.'),\n        })\n      }\n    }\n    load()\n    return () => { cancelled = true }\n  }, [projectId, fetchProject, scopeVersion, t, projectAccessScopeKey, resolveScope])\n\n  if (!accessDenied && (loading || loadedScopeKey !== projectAccessScopeKey)) {\n    return <Page><PageBody><LoadingMessage label={t('staff.timesheets.projects.loading', 'Loading project...')} /></PageBody></Page>\n  }\n\n  // Screen 17 \u2014 the caller may not open this project. Same guard state the\n  // detail page renders; it names neither the customer nor the project.\n  if (accessDenied) {\n    return <NoProjectAccess timeProjectId={projectId} resolvedScope={resolvedScope} />\n  }\n\n  if (isNotFound) {\n    return (\n      <Page>\n        <PageBody>\n          <RecordNotFoundState\n            label={t('staff.timesheets.projects.errors.notFound', 'Project not found.')}\n            backHref={LIST_HREF}\n            backLabel={t('staff.timesheets.projects.actions.backToList', 'Back to projects')}\n          />\n        </PageBody>\n      </Page>\n    )\n  }\n\n  if (error || !initialValues) {\n    return <Page><PageBody><ErrorMessage label={error ?? t('staff.timesheets.projects.errors.load', 'Failed to load project.')} /></PageBody></Page>\n  }\n\n  const detailHref = `/backend/staff/time-tracking/projects/${projectId}`\n\n  return (\n    <Page>\n      <PageBody>\n        <CrudForm<ProjectFormValues>\n          title={t('staff.time_tracking.projects.form.editTitle', 'Edit project')}\n          titleHeadingLevel={1}\n          backHref={detailHref}\n          cancelHref={detailHref}\n          fields={fields}\n          groups={groups}\n          schema={formSchema}\n          initialValues={initialValues}\n          entityIds={[E.staff.staff_time_project]}\n          injectionSpotId={extensionPoints.hosts.projectForm.spotId}\n          submitLabel={t('staff.timesheets.projects.form.actions.save', 'Save')}\n          onDelete={async () => {\n            await deleteCrud('staff/timesheets/time-projects', projectId!, {\n              errorMessage: t('staff.timesheets.projects.errors.delete', 'Failed to delete project.'),\n            })\n            flash(t('staff.timesheets.projects.messages.deleted', 'Project deleted.'), 'success')\n            router.push(LIST_HREF)\n          }}\n          onSubmit={async (values) => {\n            if (!values.name?.trim() || !values.code?.trim() || !values.customerId) {\n              const fieldErrors: Record<string, string> = {}\n              if (!values.name?.trim()) {\n                fieldErrors.name = t('staff.time_tracking.projects.validation.nameRequired', 'A project name is required.')\n              }\n              if (!values.code?.trim()) {\n                fieldErrors.code = t('staff.time_tracking.projects.validation.codeRequired', 'A project code is required.')\n              }\n              if (!values.customerId) {\n                fieldErrors.customerId = t('staff.time_tracking.projects.validation.customerRequired', 'A customer is required.')\n              }\n              throw createCrudFormError(\n                t('staff.time_tracking.projects.errors.required', 'Fill in the required fields.'),\n                fieldErrors,\n              )\n            }\n\n            const payload = buildProjectPayload({ ...values, id: projectId })\n\n            await updateCrud('staff/timesheets/time-projects', payload, {\n              errorMessage: t('staff.timesheets.projects.errors.save', 'Failed to save project.'),\n            })\n\n            flash(t('staff.timesheets.projects.messages.saved', 'Project saved.'), 'success')\n            router.push(detailHref)\n          }}\n          versionHistory={{\n            resourceKind: 'staff.timesheets.time_project',\n            resourceId: projectId!,\n            canUndoRedo: true,\n            autoCheckAcl: true,\n          }}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAqN2B;AAnN3B,SAAS,uBAAuB;AAChC,YAAY,WAAW;AACvB,SAAS,iBAAiB;AAC1B,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AACzB,SAAS,YAAY,kBAAkB;AACvC,SAAS,eAAe;AACxB,SAAS,2BAA2B;AACpC,SAAS,SAAS;AAClB,SAAS,aAAa;AACtB,SAAS,gBAAgB,cAAc,2BAA2B;AAClE,SAAS,YAAY;AACrB,SAAS,mCAAmC;AAC5C,SAAS,sCAA8D;AACvE,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC,SAAS,sCAAuE;AAChF;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEP,MAAM,YAAY;AAQlB,MAAM,2BAA2B;AAGjC,MAAM,iCAAiC,MAAM;AAAA,EAC3C,YAAqB,eAAkD;AACrE,UAAM,8BAA8B;AADjB;AAEnB,SAAK,OAAO;AAAA,EACd;AACF;AAIA,SAAS,WAAW,WAA0B,MAA+B;AAC3E,aAAW,OAAO,MAAM;AACtB,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAC1D,QAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAAA,EACpD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAAuD;AAC3E,QAAM,MAAM,OAAO,oBAAoB,OAAO;AAC9C,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,EAAG,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,SAAS,QAA0C;AAC1D,QAAM,WAAW,aAAa,MAAM;AACpC,QAAM,gBAAgB,WAAW,QAAQ,cAAc,aAAa,KAAK;AACzE,QAAM,aACJ,kBAAkB,WAAW,kBAAkB,WAAW,gBAAgB;AAC5E,QAAM,aAAa,OAAO,OAAO,eAAe,WAAW,OAAO,aAAa;AAE/E,SAAO;AAAA,IACL,IAAI,OAAO,OAAO,MAAM,EAAE;AAAA,IAC1B,WAAW,WAAW,QAAQ,aAAa,YAAY;AAAA,IACvD,MAAM,OAAO,OAAO,QAAQ,EAAE;AAAA,IAC9B,MAAM,OAAO,OAAO,QAAQ,EAAE;AAAA;AAAA;AAAA,IAG9B,YAAY;AAAA,IACZ,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,cAAc,OAAO,UAAU,SAAS,WAAW,SAAS,OAAO;AAAA,IACnE,cAAc,OAAO,UAAU,SAAS,WAAW,SAAS,OAAO;AAAA,IACnE,eAAe,OAAO,UAAU,UAAU,WAAW,SAAS,QAAQ;AAAA,IACtE,aAAa,WAAW,QAAQ,aAAa;AAAA,IAC7C,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,cAAc,WAAW,QAAQ,gBAAgB,eAAe;AAAA,IAChE,gBAAgB,OAAO,mBAAmB;AAAA,IAC1C;AAAA,IACA,oBAAoB,OAAO,qBAAqB,OAAO,yBAAyB;AAAA,IAChF,eAAe,eAAe;AAAA,IAC9B,YAAY,eAAe,SAAS,UAAU;AAAA,IAC9C,aAAa,WAAW,QAAQ,eAAe,cAAc;AAAA,IAC7D,qBACE,WAAW,QAAQ,uBAAuB,wBAAwB,KAAK,OAAO,8BAA8B;AAAA,IAC9G,8BAA8B,WAAW,QAAQ,gCAAgC,kCAAkC,KAAK;AAAA,IACxH,aAAa,WAAW,QAAQ,eAAe,cAAc;AAAA,IAC7D,OAAO,WAAW,QAAQ,OAAO;AAAA,IACjC,WAAW,WAAW,QAAQ,aAAa,YAAY;AAAA,IACvD,YAAY,WAAW,QAAQ,cAAc,aAAa;AAAA,IAC1D,QAAQ,WAAW,QAAQ,QAAQ,KAAK;AAAA;AAAA;AAAA,IAGxC,GAAG,sBAAsB,MAAiC;AAAA,EAC5D;AACF;AAEe,SAAR,4BAA6C,EAAE,OAAO,GAAiC;AAC5F,QAAM,YAAY,QAAQ;AAC1B,QAAM,IAAI,KAAK;AACf,QAAM,SAAS,UAAU;AACzB,QAAM,eAAe,4BAA4B;AACjD,QAAM,EAAE,UAAU,uBAAuB,eAAe,aAAa,IAAI,sBAAsB,SAAS;AAExG,QAAM,CAAC,eAAe,gBAAgB,IAAI,MAAM,SAAmC,IAAI;AACvF,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,KAAK;AACxD,QAAM,CAAC,sBAAsB,uBAAuB,IAAI,MAAM,SAAwB,IAAI;AAC1F,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAwB,IAAI;AAC9E,QAAM,eAAe,yBAAyB;AAE9C,QAAM,eAAe,MAAM,YAAY,YAAiG;AACtI,UAAM,OAAO,MAAM;AAAA,MACjB,2CAA2C,SAAS;AAAA,IACtD;AACA,QAAI,KAAK,WAAW,OAAO,KAAK,QAAQ,WAAW,0BAA0B;AAC3E,YAAM,IAAI,yBAAyB,+BAA+B,KAAK,QAAQ,CAAC;AAAA,IAClF;AACA,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI,MAAM,EAAE,yCAAyC,yBAAyB,CAAC;AAAA,IACvF;AACA,UAAM,SAAS,MAAM,QAAQ,KAAK,QAAQ,KAAK,IAAI,KAAK,OAAO,MAAM,CAAC,IAAI;AAC1E,WAAO,EAAE,QAAQ,UAAU,MAAM,OAAO,+BAA+B,KAAK,QAAQ,EAAE;AAAA,EACxF,GAAG,CAAC,WAAW,CAAC,CAAC;AASjB,QAAM,wBAAwB,MAAM,YAAY,MAAM;AACpD,QAAI,CAAC,UAAW;AAChB,SAAK,aAAa,EACf,KAAK,CAAC,EAAE,OAAO,MAAM;AAAE,UAAI,OAAQ,kBAAiB,SAAS,MAAM,CAAC;AAAA,IAAE,CAAC,EACvE,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL,GAAG,CAAC,cAAc,SAAS,CAAC;AAE5B,QAAM,aAAa,MAAM,QAAQ,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACpE,QAAM,SAAS,MAAM;AAAA,IACnB,MAAM,wBAAwB,GAAG,EAAE,mBAAmB,sBAAsB,CAAC;AAAA,IAC7E,CAAC,GAAG,qBAAqB;AAAA,EAC3B;AACA,QAAM,SAAS,MAAM,QAAQ,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;AAWlE,QAAM,cAAc,MAAM,OAA6E,IAAI;AAC3G,QAAM,UAAU,MAAM;AACpB,QAAI,CAAC,UAAW;AAChB,QAAI,YAAY;AAChB,UAAM,WAAW,YAAY;AAC7B,gBAAY,UAAU,EAAE,WAAW,cAAc,UAAU,sBAAsB;AACjF,UAAM,aAAa,aAAa,QAC3B,SAAS,cAAc,aACvB,SAAS,iBAAiB,KAC1B,SAAS,aAAa;AAC3B,mBAAe,OAAO;AACpB,UAAI,CAAC,WAAY,YAAW,IAAI;AAChC,YAAM,SAAS,CAAC,YAA0G;AACxH,YAAI,UAAW;AACf,gCAAwB,QAAQ,iBAAiB,OAAO,wBAAwB,IAAI;AACpF,sBAAc,QAAQ,eAAe,IAAI;AACzC,iBAAS,QAAQ,SAAS,IAAI;AAC9B,YAAI,QAAQ,OAAQ,kBAAiB,QAAQ,MAAM;AACnD,0BAAkB,qBAAqB;AACvC,mBAAW,KAAK;AAAA,MAClB;AACA,UAAI;AACF,cAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,aAAa;AAC7C,YAAI,CAAC,UAAW,cAAa,KAAK;AAClC,YAAI,CAAC,QAAQ;AACX,iBAAO,EAAE,YAAY,KAAK,CAAC;AAC3B;AAAA,QACF;AACA,eAAO,EAAE,QAAQ,SAAS,MAAM,EAAE,CAAC;AAAA,MACrC,SAAS,KAAK;AACZ,YAAI,eAAe,0BAA0B;AAC3C,cAAI,CAAC,UAAW,cAAa,IAAI,aAAa;AAC9C,iBAAO,EAAE,cAAc,KAAK,CAAC;AAC7B;AAAA,QACF;AACA,eAAO;AAAA,UACL,OAAO,eAAe,QAClB,IAAI,UACJ,EAAE,yCAAyC,yBAAyB;AAAA,QAC1E,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK;AACL,WAAO,MAAM;AAAE,kBAAY;AAAA,IAAK;AAAA,EAClC,GAAG,CAAC,WAAW,cAAc,cAAc,GAAG,uBAAuB,YAAY,CAAC;AAElF,MAAI,CAAC,iBAAiB,WAAW,mBAAmB,wBAAwB;AAC1E,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,kBAAe,OAAO,EAAE,qCAAqC,oBAAoB,GAAG,GAAE,GAAW;AAAA,EAC3H;AAIA,MAAI,cAAc;AAChB,WAAO,oBAAC,mBAAgB,eAAe,WAAW,eAA8B;AAAA,EAClF;AAEA,MAAI,YAAY;AACd,WACE,oBAAC,QACC,8BAAC,YACC;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,6CAA6C,oBAAoB;AAAA,QAC1E,UAAU;AAAA,QACV,WAAW,EAAE,gDAAgD,kBAAkB;AAAA;AAAA,IACjF,GACF,GACF;AAAA,EAEJ;AAEA,MAAI,SAAS,CAAC,eAAe;AAC3B,WAAO,oBAAC,QAAK,8BAAC,YAAS,8BAAC,gBAAa,OAAO,SAAS,EAAE,yCAAyC,yBAAyB,GAAG,GAAE,GAAW;AAAA,EAC3I;AAEA,QAAM,aAAa,yCAAyC,SAAS;AAErE,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,+CAA+C,cAAc;AAAA,MACtE,mBAAmB;AAAA,MACnB,UAAU;AAAA,MACV,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,CAAC,EAAE,MAAM,kBAAkB;AAAA,MACtC,iBAAiB,gBAAgB,MAAM,YAAY;AAAA,MACnD,aAAa,EAAE,+CAA+C,MAAM;AAAA,MACpE,UAAU,YAAY;AACpB,cAAM,WAAW,kCAAkC,WAAY;AAAA,UAC7D,cAAc,EAAE,2CAA2C,2BAA2B;AAAA,QACxF,CAAC;AACD,cAAM,EAAE,8CAA8C,kBAAkB,GAAG,SAAS;AACpF,eAAO,KAAK,SAAS;AAAA,MACvB;AAAA,MACA,UAAU,OAAO,WAAW;AAC1B,YAAI,CAAC,OAAO,MAAM,KAAK,KAAK,CAAC,OAAO,MAAM,KAAK,KAAK,CAAC,OAAO,YAAY;AACtE,gBAAM,cAAsC,CAAC;AAC7C,cAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,wBAAY,OAAO,EAAE,wDAAwD,6BAA6B;AAAA,UAC5G;AACA,cAAI,CAAC,OAAO,MAAM,KAAK,GAAG;AACxB,wBAAY,OAAO,EAAE,wDAAwD,6BAA6B;AAAA,UAC5G;AACA,cAAI,CAAC,OAAO,YAAY;AACtB,wBAAY,aAAa,EAAE,4DAA4D,yBAAyB;AAAA,UAClH;AACA,gBAAM;AAAA,YACJ,EAAE,gDAAgD,8BAA8B;AAAA,YAChF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,UAAU,oBAAoB,EAAE,GAAG,QAAQ,IAAI,UAAU,CAAC;AAEhE,cAAM,WAAW,kCAAkC,SAAS;AAAA,UAC1D,cAAc,EAAE,yCAAyC,yBAAyB;AAAA,QACpF,CAAC;AAED,cAAM,EAAE,4CAA4C,gBAAgB,GAAG,SAAS;AAChF,eAAO,KAAK,UAAU;AAAA,MACxB;AAAA,MACA,gBAAgB;AAAA,QACd,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,cAAc;AAAA,MAChB;AAAA;AAAA,EACF,GACF,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/staff/backend/staff/time-tracking/projects/[id]/page.js

@@ -32,6 +32,8 @@ import { formatCurrency } from "@open-mercato/ui/utils/format";
 import { KpiCard, Sparkline } from "@open-mercato/ui/backend/charts";
 import { ProjectTeamDrawer } from "../../../../../lib/time-tracking-ui/ProjectTeamDrawer.js";
 import { NoProjectAccess } from "../../../../../lib/time-tracking-ui/NoProjectAccess.js";
+import { useProjectAccessScope } from "../../../../../lib/time-tracking-ui/projectAccessScope.js";
+import { readResolvedProjectAccessScope } from "../../../../../lib/time-tracking-ui/projectAccessScopeHeaders.js";
 import { ProjectBudgetCell } from "../../../../../lib/timesheets-projects-ui/ProjectBudgetCell.js";
 import { computeBudgetBurn } from "../../../../../lib/timesheets-projects/budgetBurn.js";
 import { resolveProjectColorHex } from "../../../../../lib/timesheets-ui/colors.js";
@@ -69,6 +71,7 @@ function TimesheetProjectDetailPage({ params }) {
     translateRef.current = t;
   }, [t]);
   const scopeVersion = useOrganizationScopeVersion();
+  const { scopeKey: projectAccessScopeKey, resolvedScope, resolveScope } = useProjectAccessScope(projectId);
   const { confirm, ConfirmDialogElement } = useConfirmDialog();
   const router = useRouter();
   const pathname = usePathname();
@@ -77,9 +80,9 @@ function TimesheetProjectDetailPage({ params }) {
   const [loading, setLoading] = React.useState(true);
   const [error, setError] = React.useState(null);
   const [isNotFound, setIsNotFound] = React.useState(false);
-  const [accessDeniedProjectId, setAccessDeniedProjectId] = React.useState(null);
-  const accessDenied = accessDeniedProjectId !== null && accessDeniedProjectId === projectId;
-  const [settledProjectId, setSettledProjectId] = React.useState(null);
+  const [accessDeniedScopeKey, setAccessDeniedScopeKey] = React.useState(null);
+  const [loadedScopeKey, setLoadedScopeKey] = React.useState(null);
+  const accessDenied = accessDeniedScopeKey === projectAccessScopeKey;
   const [employees, setEmployees] = React.useState([]);
   const [employeesLoading, setEmployeesLoading] = React.useState(false);
   const [expandedCards, setExpandedCards] = React.useState(/* @__PURE__ */ new Set());
@@ -245,11 +248,12 @@ function TimesheetProjectDetailPage({ params }) {
         const call = await apiCall(
           `/api/staff/timesheets/time-projects?${queryParams.toString()}`
         );
+        if (!cancelled) resolveScope(readResolvedProjectAccessScope(call.response));
         if (call.status === 404 && readDenialReason(call.result) === NO_PROJECT_ACCESS_REASON) {
-          if (!cancelled) setAccessDeniedProjectId(projectId ?? null);
+          if (!cancelled) setAccessDeniedScopeKey(projectAccessScopeKey);
           return;
         }
-        if (!cancelled) setAccessDeniedProjectId(null);
+        if (!cancelled) setAccessDeniedScopeKey(null);
         if (!call.ok) {
           throw new Error(translateRef.current("staff.timesheets.projects.errors.load", "Failed to load project."));
         }
@@ -262,12 +266,13 @@ function TimesheetProjectDetailPage({ params }) {
         if (!cancelled) setProject(record);
       } catch (loadError) {
         if (!cancelled) {
+          setAccessDeniedScopeKey(null);
           setError(loadError instanceof Error ? loadError.message : translateRef.current("staff.timesheets.projects.errors.load", "Failed to load project."));
         }
       } finally {
         if (!cancelled) {
+          setLoadedScopeKey(projectAccessScopeKey);
           setLoading(false);
-          setSettledProjectId(projectId ?? null);
         }
       }
     }
@@ -275,7 +280,7 @@ function TimesheetProjectDetailPage({ params }) {
     return () => {
       cancelled = true;
     };
-  }, [projectId, scopeVersion]);
+  }, [projectId, scopeVersion, projectAccessScopeKey, resolveScope]);
   const loadEmployees = React.useCallback(async () => {
     if (!projectId || accessDenied) return;
     setEmployeesLoading(true);
@@ -491,9 +496,9 @@ function TimesheetProjectDetailPage({ params }) {
     }
   }, [handleAddEmployee]);
   if (accessDenied) {
-    return /* @__PURE__ */ jsx(NoProjectAccess, { timeProjectId: projectId });
+    return /* @__PURE__ */ jsx(NoProjectAccess, { timeProjectId: projectId, resolvedScope });
   }
-  if (loading || settledProjectId !== (projectId ?? null)) {
+  if (loading || loadedScopeKey !== projectAccessScopeKey) {
     return /* @__PURE__ */ jsx(Page, { children: /* @__PURE__ */ jsx(PageBody, { children: /* @__PURE__ */ jsx(LoadingMessage, { label: t("staff.timesheets.projects.loading", "Loading project...") }) }) });
   }
   if (isNotFound) {